VulnerabilityModified
CVE-2016-2564
Attackers can guess an Invision Power Board session cookie if they can predict the exact time of cookie generation.
MEDIUM 5.9EPSS 1.27%
Does this matter?
Lower severity and a low EPSS score (1.27%). Track it; it rarely justifies an emergency change on its own.
Description
Invision Power Services (IPS) Community Suite before 4.1.9 makes session hijack easier by relying on the PHP uniqid function without the more_entropy flag. Attackers can guess an Invision Power Board session cookie if they can predict the exact time of cookie generation.
- CVSS 3.0
- 5.9 MEDIUMCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 1.27% probability · 68th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-331
- Affected
- invisioncommunity/invision power board
- Source
- cve@mitre.org
References
- https://invisionpower.com/release-notes/419-r37/Release Notes, Vendor Advisory
- https://medium.com/%40iancarroll/bypassing-authentication-in-invision-power-board-with-cve-2016-2564-9a24ea3655f9
- https://invisionpower.com/release-notes/419-r37/Release Notes, Vendor Advisory
- https://medium.com/%40iancarroll/bypassing-authentication-in-invision-power-board-with-cve-2016-2564-9a24ea3655f9
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.